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1.0 Project Summary 

This report summarizes an investigation into the feasibility of establishing a second 
generation space transportation system. Incorporating successful systems from the Space 
Shuttle and technological advances made since its conception, the second generation 
shuttle presented here was designed to be a lower-cost, more reliable system which would 
guarantee access to space well into the next century. A fully reusable, all-liqmd propellant 
booster/orbiter combination using parallel bum was selected as the base configuration. 
Vehicle characteristics were determined from NASA ground rules and optimization 
evaluations. The launch profile was constructed from particulars of the vehicle design an 
known orbital requirements. A stability and control analysis was performed for the 
landing phase of the orbiter’s flight. Finally, a preliminary safety analysis was 
performed to indicate possible failure modes and consequences. 
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2.0 Review 

The Advanced Space Transportation System IMIk<|nnM 
supplement and later replace the turret. W^hLl^vel, high 

characteristic of the current system me d i ow level of reliability, 

operational cost per launch, excessive turn-around time, ana a 

An Advanced Space ™^°UoS 

the twenty-first century, is the next logica P Shuttle II offers the 

program. Designed as a high-technoloB, ^^'Led missions and 
promise of lower operational costs a gr industrial advances made since the 

cargo deployment Its design include, but are not limited 

aerodynamics, and the experience gained from the present STS. 

A number of factors deemed enfied * 

influenced the design of the Shuttle II. Amo g oer f orman ce maintaining a reusable 
lower cost per launch, emphasis on reliabi y P ope d technology, the presence 

system, low cost engines, pre-processed Launch Vehicle 

of a permanently-manned space station, de p - car g 0 / p assenger transport 

(HLLV) to off-load payload requirements, and compatibihty of cargo/passeng 

with systems already operational. 

To select the most practical and efficient ' on ^T the possibility of a 
parameters were examined. These winded reu^d.iy of Urn sjtenn P d h . 

manned booster system, the number of vehicle stages ffie ^e of pr^eumit ^ 
type of bum staging. These five considerations ^ eval ua tion criteria to select 

designs. These configurations were then ^“system, the 

the optimum design. These criteria includ ASTS program (including the 

performance of the system, the time, 

cost per flight), and the operation and support of the system, inc.u b 

overhauls, and reliability. 

The final de»i f was re Q u,red^me^Nat,onalA«- 

i"J> the 

east launch from Kennedy Space Center m£ a 270 nautical mi, e o^ ^ ^ 

of 28.5 degrees, and a launch from Vand ^^ on an anticipated 

orbit with an inclination of 98 degrees. P P a hilitv to be transported by air from 

and a two-stage parallel bum of all-liquid propellants. 
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3.0 Proposed System Configuration Description 

From the preliminary design studies, 

from a manned orbiter and an unmanned flyback bmter waa^ detenu ^ ft was farth< , r 

configuration presented here (See Figures 3.0.1 and 3.0.2). 

S£LSS rS —S having a common structure in which components 
can fit for either the booster or the orbiter. 


3.1 Changes In Preliminary 'Configuration 

fttSf^rSrf four engines and the booster with a total of six engines. Thus 
change was made for three principal reasons. 

• to reduce the dry weight of the orbiter; 

. to give the booster a larger thrust/weight ratio, tom; 

general purpose booster that is not necessanly reatncted to the Shuttle 11 system 

. to allow the booster to carry more propellant, lowering the gross lift-off we.ght of the 

orbiter and giving the booster a longer bum duration. 

tank, was also enlarged to 28 feet in diameter. 

The crew compartment, originally envisioned “ foXd^tanks 

Shuttle Orbiter), was changed to a amgWave 1 tay la exp^ded, 

section) in the sixty feet under the cargo bay doors. 

Since the booster does not requirea tn. compartment support facil Mek cargo bay 

StitL W ;^i«^X two extra engines mid corresponding pumping 
facilities. 


3.2 Wing 

A delta wing configuration w »s chosen for 

constant-taper wings in terms of both heat shielding au g j 
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The horizontal tail mar be eliminated by using 

twisted. Furthermore, flight experience gained from the STS can mcorp 
anticipated Shuttle II wing performance. 

loading does not significantly differ from that of the Shuttle Orbitor. 

The following table lists the wing data used in aerodynamic analysis. 

Table 3.2.1: Delta Wing Physical Characteristics 


Root Chord 

87.00 feet 

18.00 feet 

Tip Chord 

51.12 feet 

Mean Aerodynamic Chord 

2.800 

Aspect Ratio 

0.246 

Taper Ratio 

47° 

Leading Edge Sweep 

42? 

Quarter Chord Sweep 

13° 

Trailing Edge Sweep 

5818 feet 2 

Planform Area 

9738 feet 2 

Wetted Area 

30.0 feet 

Body Width at Wing 

28.0 feet 

Body Height at Wing 


constant thickness/chord ratio of 6% was asst "f* * t ^^ter vddcle 
control surface on each half-wing for lateral control of the orbiter vehic . 


3.3 Vertical Tail 

impairing performance. 

The following table lists the vertical tail data used in aerodynamic analysis. 
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Table 3.3.1: Vertical Tail Physical Characteristics 


Root Chord 
Tip Chord 

Mean Aerodynamic Chord 


Aspect Ratio 
Taper Ratio 
Leading Edge Sweep 
Quarter Chord Sweep 
Trailing Edge Sweep 
Planform Area 

Wetted Area . _ _ , Af , 

Zf: Vertical distance between aircraft CG and al-f 
\r. Horizontal distance between aircraft CG and ACf 


29.00 feet 
14.50 feet 
21.40 feet 
5.580 
0.500 
52° 
49 * 
41° 
603 feet 2 
1206 feet 2 

41.0 feet 

48.0 feet 


The vertical tail is a composite design with an estimated 80% of the unit mass of the 
aluminum tail on the Shuttle Orbiter. 

A schematic of the vertical tail is shown in Figure 3.2.1. 


3.4 Forward Fuselage 

The first 50 feet of the fuselage is designated as the forward 
forward section of the orbiter and booster are the -std— to 

SSZ1S3 ?■ houses 

SSJSSS^ * 

stations, access panels, and external and cargo bay access. 

A schematic of the fuselage is shown in Figure 3.4.1. 


3.5 Mid Fuselage 

The mid section is designated as the sixty feet offi ^ 

This section has a constant cross-sectional area. On ‘^Tt txtema^ doles to the cargo 

Tn 5SS? StaS Uy dMrs 

are located across the top of the section for its entire length of sixty feet. 



Figure 3.4. 1: Top and Side Views of the Orbiter Fuselage 


Drawn By: Del Johnson 
Date: March 7, 1 989 
Scale: 1’:18* 
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This section has a constant width of 30 feet and height of 28 feet Only the mechanisms for 
opening and closing the cargo bay doors, structural reinforcements for the bay, and the 
doors themselves raise the weight above that of a simple hollow structure. 'Hie section is 
composed of an aluminum skin structure with aluminum honeycomb panels. Its unit 
weight is estimated at 80% that of the Shuttle Orbiter cargo area. 


3.6 Aft Fuselage 

The aft fuselage is the section which contains the oxygen tank and most of the plumbing for 
the main engines on both the booster and the orbiter. Structurally, it has constant area 
except for the fairings on either side to house the auxiliary propulsion. Since the number of 
engines on the booster differs from that on the orbiter, the rear panel is completely different 
between the two vehicles. 


This section consists of a semimonocoque shell extending from the rear of the cargo bay to 
the engine support plane. It includes a 4 foot fairing on either side to house the orbital 
maneuvering system, a base heat shield support structure located at the engine support 
plane, and the body flap. Its weight is estimated at 80% that of the Shuttle Orbiter rear 

fuselage. 


3.7 Fuel and Oxidizer Tanks 

The fuel and oxidizer tanks for the booster and the orbiter differ in both shape and size. In 
the booster, which has a largely uniform cross-section available for its entire length, 
simple cylindrical tanks are used. In the orbiter, a more complicated arrangement is 
necessary to accommodate personnel and cargo. The location of the cargo bay 
immediately behind the flight deck and along the top of the fuselage leaves a large volume 
directly under the flight deck and cargo bay empty. The hydrogen tanks of the orbiter are 
located here to use this space most efficiently. These tanks are arranged symmetrically to 
insure proper weight distribution during ascent and landing maneuvers. The oxygen 
tank is located immediately aft of this section and just before the engine housing. 

The liquid hydrogen tanks are all-welded titanium honeycomb sandwich pressure vessels 
with ring stiffened sidewalls. They are designed by cryogenic temperature proof test 
conditions corresponding to 3g boost acceleration with a maximum pressure of 26 psia. 

The liquid oxygen tanks are all-welded aluminum pressure vessels with stiffened 
sidewalls. The tanks are designed by room temperature proof tests conditions 
corresponding to 3g boost acceleration with a maximum pressure of 26 psia. 

The following tables contain summaries of the design specifications for tanks used in both 
the orbiter and the booster vehicles. 


Table 3.7.1: Orbi ter Tank Characteristics 


Hydrogen Tanks: 

Number 

Weight of Hydrogen 
Total Volume 
Overall Length 
Overall DiameteT 
Oxygen Tanks: 

Number 

Weight of Oxygen 
Total Volume 
Overall Length 
Overall Diameter 


2 

135,964.29 lb 
31,112.40 ft 3 
92 ft 
15 ft 

1 

815,785.711b 
11,372.68 ft 3 
22 feet 
28 feet 


Table 3.7.2: Booster Tank Characteristics 


Hydrogen Tanks: 

Number 

Weight of Hydrogen 
Total Volume 
Overall Length 
Overall Diameter 
Oxygen Tanks: 

Number 

Weight of Oxygen 
Total Volume 
Overall Length 
Overall Diameter 


1 

198,280.611b 

45.372.10 ft 3 
92 ft 

28.00 ft 

1 

1,189,683.67 lb 

16.585.10 ft 3 
31 feet 
28 feet 


3.8 Payload Bay and Payload Bay Doors 

The payload bay is located immediately aft of the flight deck on the orbiter. It is sixty feet 
long and a minimum of fifteen feet in diameter. It is designed to hold removable payload 
modules which have been pre-processed for placement in the orbiter either in the vehicle 
assembly building or on the launch pad. 

An access hatch to the cargo bay is located at the rear of the crew compartment on the flight 
deck. Since the crew compartment is located in the upper half of the orbiter, the access hatch 
can open to the center of its fifteen foot diameter. 

The doors of the cargo bay are formed from a graphite/epoxy composite to reduce weight and 
thermal distortion. These factors are of chief importance when the doors are opened and 
closed in space. Here they serve as heat exchangers and solar panels. Through use of 
composites rather than aluminum, the doors were estimated as having a unit weight 70% 
that of the Shuttle Orbiter. 
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'pSS in 

position during ascent and landing. 


3.9 Thrust Structure 

The thrust structure is . beam system of composite d^ which ^smits tost loads^ 

^^^"u^TstSS ~ 3— *• * ft 

fuselage. 


3.10 Ascent Propulsion 

Ascent propulsion is provided by ten Space “^."tur 

arelocated^n i^^mar^irfttm orb^sr veWde^while weigh^mthTof*! 4^it^ea 

and has a 1.2 thrust-to-weight ratio at sea level. 

The arrangement of these engines as seen from^er^rw^deteramed ™ cross- 
complexity of the pumping systems and diamond pattern 

lost during ascent. A modified circular pattern was chosen for the booster 
symmetry and compatibility with the orbiter bum pattern. 

A schematic of the bum pattern for both the booster and the orbiter is show, in Figure 3.10.1. 


3.11 Fuel/Oxidizer Feed System 


g, i i ruvi/ ■ — • 

A crossfeed mating system is used between the booster and orbiter to m ^ im ^ the amount 

ofSo^d Jorbiter at the time of separation. the 

separates from the orbiter its tanks are -P^^rimais Ss ideal ritSon Twhile 
STME configuration chosen, the mission closely approxima 

still leaving a safety margin), 
lines. 

as part of the fuel/oxidizer feed system of the main propellants. 
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Booster Engine Pattern 



Launch Configuration Bum Pattern 


Figure 3.10.1: Engine Arrangement and Launch Configuration Burn Pattern 


Drawn By: Del Johnson 
Date: March 7, 1989 
Scale: 1":18' 
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An orbital maneuvering system is pro "^ 0 j°o r SuMfts duringthe mission’. Two such 
deceleration for the descent phase, an J . , beside the thrust structure. Each 

systems are located in famngs affixed to the aft tewtW pounds of 

OMS consists of a single 8,000 pound en ^" e “togen tetroxide was 

propellant. Monomethylhydrazme n seteri ^ “the f» * efficiency. 

chosen as the oxidizer. Each has good storag p P i l t system with great success 

Furthermore, the Shuttle Orinter ' OhTC has nted sucha p ™«^ C^rbiter vehicle from 

in the past The OMS consumes themmonty onte fim^m Mo 8^ ^ orbit 

the elliptical orbit initially achieved with the main ascent tnrus^ 

coincident with the space station. 

ssisss » f 

thrust in a vacuum. 


3.13 Landing Structures 

The ASTS retains the conventional lan^ng^ear of the 

in combination with the weights allocated 

to the fuselage. 
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4.0 Performance/Mission Analysis 

The total mission performance of the Shuttle II can be easily broken down into five 
segments: the launch/ascent phase during which the booster and orbiter are connected, the 
flight of the booster following separation and subsequent landing, the flight and orbital 
insertion of the orbiter, the orbital mission of the orbiter, and the descent and landing of the 
orbiter. Each phase is very different from the other, and all five are described in detail 
below. 


4.1 Launch Event Schedule 

The Launch Event Schedule determines the sequence of occurrences following a decision 
to launch in a given window of opportunity. Although many important pre-flight 
preparations must be made for the launch to commence, this schedule details only those 
events that directly relate to the mission flight profile. Assuming a normal three-to four 
day countdown resulting in a delay immediately preceding the final countdown for 
launch, the following stages of the launch must be executed in series: 

• After coming off the final hold, fuel and oxidizer will be released from the main tanks, 
conditioning the plumbing for the main engines on both the booster and orbiter. The 
tanks will be pressurized and sealed, and the external feed systems will be removed. 

At this point, the tower will be moved away from the booster-orbiter vehicle and stored 
in its final position. Onboard systems will be continually checked and maintained for 
launch readiness until the time of launch. 

• When the countdown reaches 45 seconds remaining, fuel and oxidizer will be released 
into the turbomachinery to condition them for launch. At this point, a delay of more 
than approximately two hours will require the turbopumps to be bled, and the launch 
will have to be temporarily postponed. 

• Ass um ing that all systems are functioning properly, a decision to launch will be made, 
and the main engines on both orbiter and booster will be fired 5 seconds before lift-off 
from the pad. During this time, the engines will be brought up to steady-state 
performance levels and checked for proper functioning. Even if one engine fails, the 
engine-out capability of the system will allow the launch to continue by throttling up the 
remaining engines that properly function. 

• At 0:00 the booster-orbiter configuration will be released from the hold-down posts and 
allowed to accelerate. For the first twenty seconds of the launch, the shuttle will ascend 
vertically while rolling into proper alignment. After twenty seconds, the system will 
begin to pitch at a rate of 0.5 degrees/second. The booster will pitch nose down, while the 
orbiter will rotate onto its back. This pitching motion will continue until the booster is 
aligned at a 30 degree angle with the horizon, eight seconds before separation and 120 
seconds following commencement of the maneuver. 

• At 2:28 into the launch, the booster will separate from the orbiter vehicle. At this point, 
the booster/orbiter combination is approximately 37 miles downrange from the launch 
site at an altitude of roughly 40 miles. The booster will begin to execute its turnaround 
procedure for a flyback to the landing site, while the orbiter will continue its ascent into 
orbital insertion. 

• The orbiter will continue in this 30 degree orientation until it has cleared the booster. 
Twelve seconds after separation, 160 seconds into the launch, the orbiter will begin a 
pitch maneuver of 0.5 degrees/second that will bring it into its final orientation of 12 
degrees with respect to the horizon. 



At a time of 6:34 into the launch, the main engines of the orbiter will be shut do 
initial orbital insertion will have taken place. At this time, the shuttle wil te6 3 5miles 
downrange and at an altitude of 90 miles. The total ve ocity will be: sightly greater 
than the local circular orbital speed, placing it in an elhptical orbit. Following th 
orbital insertion, the orbital maneuvering system will be fired at the apogee to 
minimize energy necessary to transfer between orbits. The shuttle will then be m a 
nautical mile circular orbit, due east of Kennedy Space Center. 



Table 4.1.1: System Launch Event Schedule 


Ignition of Main Engines on Booster and Orbiter 
Release of Main Restraining Members/Launch 
Optional throttle-down to 85% power during maximum q 
Throttle-up to maximum power 
Separation of orbiter and booster stages 


-0:00:05.0 

0:00:00.0 

0:00:48.0 

0:01:20.0 

0:02:28.0 



Table 4.1.2: Orbiter Launch Event Schedule 


Separation from booster 
Shutoff of main engines 
Initial Orbital insertion 


0:02:28.0 

0:06:34.0 

0:06:34.0 


4.2 Booster Launch/Landing Event Schedule 

Following separation from the shuttle system, the booster will fall away in unpowered 
flight until it is clear of the orbiter. It will pull up to a 20-30 degree angle of attack to 
increase drag and slow down. When slowed sufficiently, the reaction control system will 
fire and begin a powered, high-g turn to re-orient the booster with the landing site The 

booster will be slowed to a stop and allowed to fall back to the earth, pitching down to 

increase speed and reduce drag. The booster will then glide back to the landing site, using 
bums from the reaction control system if necessary for m-flight maneuvers rejuinng 
more than aerodynamic forces. At the end of its descent, it will flare and follow the same 
landing procedure detailed later for the orbiter vehicle. 


Table 428 : Booster Launch / L andin g Event Schedule 


Separation from orbiter 
Shutoff of main engines 

Increase in angle of attack to increase drag and reduce velocity 

Beginning of high-speed turnaround 

End of high-speed turnaround 

Beginning of glide down to lower atmosphere 

Beginning of landing approach 

Landing 


0:02:15.0 

0:02:16.0 

0:02:45.0 

0:06:15.0 

0:07:15.0 

0:07:30.0 

0:19:30.0 

0:21:30.0 
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4.3 Orbiter Orbital Event Schedule 

The initial bum sequence for the ASTS will place the orbiter at an 

mites with a velocity of 25, 962 feet per second. Since this value is slightly greater than the 

ttra -i*-*. the orfjiter ** proceed in “ empticai ° rb,t 

eccentricity of 0.02473. 

At the apogee altitude of 257 nautical miles, the first of two bums designed to complete 
orbital insertion will be made. These bums vdll produce an elliptic^ ^i^rfer thu 
minimizing the energy necessary to accomplish the maneuver. ' The ortotal maneuver! g 
svstem (OMS) will be employed to increase the total velocity by 181 feet/seco . 
increase in velocity will place the orbiter into another elliptical orbit with a velocity a 

perigee of 24,890 feet per second. 

At the aooeee of this second orbit, an altitude of 270 nautical miles a second bum of the 
OMS ^ p«<ta»ed. This W will increase the totid velocity by 176feetis«o„d to the 
^circular speed of 24,975 feet/second. At this point, the orbiter w.11 be m a 270 nautical 

mile circular orbit. 

The total impulsive change in velocity necessary to accomplish these 

of 357 feet/second. This value falls well within the capabihties of both the OMS employ 

on the current STS and the OMS designed for use on the Shuttle II orbiter. 

The particulars of any given orbital mission are determined by the payload and crew 
^iedtoto orbit. Missions will be designed for three day to one week periods, depending 
on its specific purposes. In general, enough provisions for sixteen man- weeks wi 
standard on alf missions. Thus, even missions that visit the Space Station will have the 
Wry of operating independently from external sources. Typical mission P r0 £ les 
include: the launch and assembly of Space Station components, mamtenanceofan^ 
taking stores to the space station, performing experiments independently using the ESA 
Soacelab shuttling personnel to and from the space station, launching satellites into both 
%o£t GEO, repair and/or retrieval of already-orbiting satellites, and rendezvous with 

other space facilities. 

In general, mission times will be minimized to minimize turnaround times, therefore 
maximizing the number of annual missions. 


4.4 Orbiter Landing Event Schedule 

Once the orbital mission is completed, preparations must be made for re : en ^T h f 
landing location dictates the point where the actual de-orbit sequence is m^iated. An O 
de-orbit bum which slows the orbiter just enough to begin the re-entry process, is 
performed. Small, supplemental RCS bums are made to maintain the correct nose-up 
attitude for the orbiter as it continues on its re-entry course. 

At an altitude of approximately 250,000 feet, attitude control is exercised b y ™ e “ s of ^ 
reaction control system. These adjustments will continue to be made by the RCS until a 
altitude of approximately 80,000 feet. From 80,000 feet until touchdown, the orbiter 
controlled with the large body flap, speed brake, and elevons. 
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To minimize the effects of drag on the wheels do not lock 

3hoSe „ touches down with a 

velocity of approximately 300 feet per second. 

Accurate guidance to ^landing ^^^necesTJ^^S toX^teVsTit can 
STe descent A similar system will be used for the Shuttle 


II. 
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5.0 Stability and Control Analysis 

Stability and Control parameters for the Advanced Space Transportation System were 
computed using methods given by Roskam, Etkin, and Smetana. These methods are ase 
on previously compiled flight data so that the basic stability and control parameters of 
almost any configuration can be determined. Physical parameters for the Shuttle II can be 
found in Tables 3.2.1 and 3.3.1. 

The longitudinal static stability of the Shuttle II was determined using the relationship: 


CMa - CLa Qi * 

where Cmo = change is pitching moment due to variation in angle of attack 
CLa = change in lift coefficient due to variation in angle of attack 
h = non-dimensional center of gravity location 
hn = non-dimensional location of the neutral point 

The static stability/instability of a configuration is immediately known through the value 
of CMa- For an aircraft to be statically stable, it must have a negative value for C M a- bmce 
Clo is always positive, hn must be greater than h for static stability, i.e. the center of 
gravity must lie ahead of the neutral point. 

Values of Cl a for the Shuttle II were found to vary greatly with Mach number and only 
slightly with Reynolds number. In fact, C La increased with increasing values of subsonic 
Mach numbers and decreased with increasing values of supersonic Mach numbers. For 
instance, at very low subsonic speeds, Cux was found to have a value of approximately 
2.7/rad; whereas, the value of Clo at a Mach number of approximately 2.8 was 1.62/rad. 

Clo for the Shuttle II was found to be maximum (4.42/rad) in the 1.0 - 1.3 Mach number 
range. 

The value of the non-dimensional center of gravity (the location from the leading edge of 
the mean aerodynamic chord to the center of gravity divided by the value for the mean 
aerodynamic chord) was found by summing the moments due to the weight components for 
the Shuttle II orbiter and dividing by the total weight of the vehicle. Calculations reveal that 
the center of gravity location for the Shuttle II orbiter is approximately 91 feet from the nose 
along the body centerline. When non-dimen sionalized by the mean aerodynamic chord, h 
has a value of 0.136. 

The neutral point is the point where the total aircraft pitching moment is invariant with 
angle of attack. Studies show that at low subsonic cruise the value of hn is approximately 
0.25 (i.e. it lies on the quarter-chord) and continues to increase towards a value of 0.5 for 
high supersonic cruise. Analysis of the Shuttle II configuration reveals that at low subsonic 
speeds, hn has a value of approximately 0.28 at a Mach number of approximately 0.49. 

Hence, the Shuttle II proved to be statically stable for all flight regimes considered since its 
center of gravity was always located ahead of its neutral point. 

In addition to static stability, a flight vehicle should also demonstrate dynamic stability. 

In actuality, neither static or dynamic stability is essential since fly-by-wire control 
systems could be implemented to account for the instabilites; nevertheless, dynamic 
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stability is still considered an important part of the stability and control picture and will be 
considered. 

equations of motion for the Shuttlellarevmtwnm deriyatives for the Shuttle II. 

S the system is said to longitudinally and laterally dynanucally stable. 

After determining the stability matrices for the Shuttle II during its Imdin^approach 

this situation can be eliminated by employing a fly-by-wire control syste . 
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6.0 imenac© wim 

An important technical and economic 

^ °" d ** B ° eing M7 

transport aircraft. 

. Space Station: A permanently manned space stationed * "*d in low 

orbit during the mid 1990 s. Among the c p docking port for the Space 

pressurized modules for habitation and will require 

Shuttle and Shuttle II. The transfer of ere , PP therefore a critical design point 
frequent docking of the orbiter to the space ^ be used in the two, 

will be the interface of these two path is the primary 

so there will be no need for extensive airlocks^ The e„t^eia^ ^ ^ 

concern of docking compatibility and 5 f ee t per second, but the dynamic 

closing velocity will be roughly between 0.5 an • cou jd be sign if ican t 

SSn^gato’j 'ZSto ^"s prablam before a suitable docking 

. Lauarf^Site^Fw operational and economi^^eaMntJh^ existing 

will be modified whenever possible to g e Center and Vandenberg Air 

Force 6 Bas^At 'Kennedy! the orbiter 

necessary to construct a landing strip oermanent caretaker status. However, 

t Shuttle launches when it was mothballed in 

. Shuttle Rotating Service Structure: Th. : purree 

in the STS is to position an environment! y , contro^ayload ^ or remov(!d 

mated position with the orbiter cargo bay complete the structure is 

without exposure to the outside environment °n« TO^tructure will be 

payload = By limiting tiie size 

• St^e ABTB be used 

transportation system used with the • Kennedy to operation sites when 

» tL aiso 

be transportable in a similar fashion. 


7.0 Safety Analysis 


When operating a complex vehicle consisting * “ 0,6 

operating subsystem the 'and personnel 

33SSS "^awa-es, of the hazard, mid risk, to prachce sound 

engineering judgment when crises arise. 

The following system of hazard **»«. 

making process by familiarizing tho “ “f “ 0 ^ 0 ”*^ se S 0 J j£ e model set forth by the 

dangers of the system. This sys m if rtr tVipSTME In it severity categories are 

ssrsrntr ^ 

system loss. The hazards are categorized as follows: 


Table 7.0.1: Hazard Severity Categories 

. Catastrophic (CA): No time or means are available for corrective action. 

. Critical (CR): May be counteracted by emergency action performed m a time y 

. Controlled (CO): Has been counteracted by appropriate design, safety devices, caution 

made to verify this elimination or reduction by way of required test program , 
analytical studies, and/or training programs. 

. Residual Hazard: A hazard for which safety or warning devices and/or special 

NASA. Continuation of effort to eliminate or reduce devices 

Mot P S«= rSu^ha^tionale £ residua, 
hazards is documented. , 

' X ^w^S 

program management accepts the induced risk. 

. Open Safety Item: A hazard for which effective lumard con trols have not been provided, 
Sfon as.ip.ment has been made to implement effect™ hazard control, 

. Eliminated (EL): Completely eliminated by design; energy source cannot cause a 
hazard. Eliminated hazards are not listed in the hazard ana y 
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These failure modes correspond to those laid out in the STME handbook. The failures of t 
Shuttle II have been broken down into three main divisions: ascent propulsion structures, 
and control systems. These subsystems have the most significant impact on the mission 
during its two most critical phases, ascent and landing. 

7.1 Ascent Propulsion Failure Modes 

The extent of damage caused by propulsion will vary with the particular system 
components involved, but ascent propulsion failures range from nearly 100% catastrophic 
internal fuel leakages to relatively minor ignition failures. These failures are give 
described in the STME handbook. 

• Thrust Chamber Assembly Injector: 

Function: Atomizes propellant for efficient, stable combustion 

Failure Mode: Internal leakage 

Effects: Engine failure due to explosion 
Consequence: Catastrophic 

• Combustion Chamber: . ,. , ,, 

Function: Contains, contracts, and expands combustion gases; directs hot 

gases to nozzle coolant manifold 
Failure Mode: Fails to contain and direct hot gases 
Effects: Engine failure 
Consequence: Controlled 
Nozzle: 

Function: 


Function: Provides controlled expansion to increase thrust 
Failure Mode: Fails to properly contract hot gasses 
Effects: Reduced engine performance 
Conseauence: Controlled 


Consequence: Controlled 

Deployable Nozzle: „ , , , 

Function: Extends to provide additional expansion of chamber gasses 

Failure Mode: Fails to properly direct hot gasses 
Effects: Reduced engine performance 
Consequence: Controlled 
Main Fuel Valve: 

Function: 


Function: Controls liquid hydrogen flow to the thrust chamber 
Failure Mode: Fails to open; no propellant flow 
Effects: Engine fails to start 
Consequence: Controlled 
Failure Mode: External leakage 

Effects: Reduced engine performance; fire/explosion 
Consequence: Catastrophic 

Main Oxidizer Valve: , , 

Function: Controls liquid oxygen propellant to the combustion chamber 

Failure Mode: Fails to open; no oxidizer flow 
Effects: Engine fails to start 
Consequence: Controlled 
Low Pressure Oxidizer Turbopump Assembly: 

Function: Controls and directs oxidizer flow 
Failure Mode: internal leakage of liquid oxygen 

Effects: Possible pump failure or liquid oxygen fire/explosion 

Consequence: Controlled 
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Function: 


Failure Mode: 
Effects: 
Consequence: 
Gas Generator: 

Function: 
Failure Mode: 
Effects: 
Consequence: 


Convertsfenergy from hot gasses to rotational energy for driving 

Fdl^torotote properly and pump liquid hydrogen as ™J uired 
Engine failure due to lack of liquid hydrogen propellant 

Catastrophic 


Provides hot gas to drive turbine and pressurize propellants 

Internal leakage 
Engine failure due to deformation 

uonsequentc. Catastrophic 

G “ Ge ^oS ni ^S* ignition to the gas generator 

Failure Mode: Fails to provide ignition energy for the gas genera r 
Effects: Engine fails to start 
Consequence: Controlled 

Gas Generator Ignition Assembly: 

Function- Provides spark ignition to the gas generate 
Failure Mode: Fails to provide ignition energy for the gas generator 
Effects: Engine fails to start 
Consequence: Controlled 

^^Sl^STupport and attachment of engine components 
Failure Mode’ Fails to maintain supports and contain liqui prope 

EffeS; Engine failure due to explosion or fhmnentation damage 

Consequence: Catastrophic 

7.2 Structural Failure Modes 

Structural Mures are another critical category w hich muttb . analysed m Urn Main* 

X33* Mr" 2E Made, ft. cargo bay doors, the landing gear 
system, and the thermal protection system. 


Fuselage Structure: 
Function: 
Failure Mode: 
Effects: 

Consequence: 

Wing: 

Function: 
Failure Mode: 
Effects: 
Consequence: 
Vertical Tail: 

Function: 
Failure Mode: 
Effects: 
Consequence: 


■ovides main support structure for orbiter/booster vehicle 
■ack rupture, or metal failure 

.pressurization of crew cabin or cargo bay; fragmentation 
image to adjacent structural components 




Generate lift and provide stability 
Shearing or stress fractures during ascent 
Asymmetrical instability; incapable of reentry 
Critical 


Provides lateral stability 

Shearing or stress fractures during ascent 

Severe problems during landing and approach 

Critical 
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Function: Protects vehicle against extreme re-entiy temperatures 

High re-entry temperatures yield thermal penetration of fuselage 
Localized disintegration of aluminum skin structure; potential 
crew/cargo damage 

Critical 


Failure Mode: 
Effects: 


Consequence: 
Thrust Structure: 
Function: 

Failure Mode: 
Effects: 

Consequence: 
Landing Gear: 

Function: 
Failure Mode: 
Effects: 
Consequence: 
Cargo Bay Doors: 
Function: 

Failure Mode: 
Effects: 
Consequence: 
Windows: 

Function: 
Failure Mode: 
Effects: 
Consequence: 
Control Surfaces: 
Function: 
Failure Mode: 
Effects: 

Cl 


Transmits thrust loads from the STMEs, OMS, and RCS to aft 

fuselage . . 

Rupture in feed lines; exposure of engine compartment 
Explosion damage; loss of (multiple) engine power; thrust 
deflection 
Critical 

Allows successful landing maneuvers 

Fails to extend fully , . . 

Shearing on touchdown; severe damage to orbiter/booster structure 

Critical 

Provides a sealed access to and enclosure for the cargo bay and 
cargo 

Shearing during ascent , 

Exposure of cargo to environment; loss of unsecured cargo 

Critical 

Provides visibility during landing and orbital maneuvers 

Cracking, shattering 

Loss of visibility; depressurization 

Critical 

Maintain longitudinal and lateral stability 
Shearing or stress fractures 

Loss of stability during atmospheric re-entry and landing 

Pn /t nn 1 



Any movable component of the ASTS controlled by electncal y operated servos would 
become useless in the event of electrical failure. Included m Ibis gmup are the control 
surfaces, cargo bay doors, engine components and flight deck controls. 

- Rudder: 

Provides lateral stability 
Fails to respond to input signals 
Landing hazardous if crosswinds are prevalent 

Controlled 


Function: 
Failure Mode: 
Effects: 
Consequence: 
Elevons/Ailerons: 
Function: 
Failure Mode: 
Effects: 
Consequence: 


Pitch-down and landing maneuvers 

Fails to respond to input signals 

Cannot perform' maneuvers necessary for landing 

Critical 





Provides a sealed access to and enclosure for the cargo bay and 
cargo 

Fai,Ure E “et; ^el1rdfnTdue°t r o b Lperatures encountered by the exposed 
doors 

Consequence: Controlled 

mat to achieve desired orbit and begin re-entry 

Fai,Ure Effet; 5^5S£g*a ^^ed oAital altitude; radically changes orbit 
Consequence: Controlled to Critical 

RMCtt “S^: S p^des thrust to maintain desired orbit, maneuver while in orbit 

Failure Mode: Fails to fire; fails to shut down , entry 

Effects: Prevents proper orientation during orb 
maneuvers 

Consequence: Controlled to Critical 

FU ^‘ I Cc < SrSov,de, means for direct control of the orbiter vehicle by pilot 

Failure Mode: Fails to respond to pilot commands i 

c.:rs assaerss"— • 

flight controls system 


Failure Mode: 
Effects: 
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